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METHOD FOR ENCODING/DECODING A BINARY SIGNAL STATE 
IN A FAULT TOLERANT ENVIRONMENT 

BACKGROUND OF THE INVENTION 

The present invention relates to fault tolerant systems and, more 
particularly, to a method for confirming validity of a control signal for energizing a 
back-up system in a fault tolerant environment. 

Numerous electronic control systems utilize multiple redundant systems to 
assure fault tolerance in critical applications. One example of such a system is a 
redundant switching fabric for a communication line card installation. Typically, 
such systems have two switching fabrics, a primary and a back-up. All of the line 
cards are connected to the outside world through the switching fabric. In the 
event that the primary fabric has a failure, the system has to switch to the back- 
up fabric. In this example, the switching function resides on each line card and a 
remote controller provides a binary state signal to each card to let the card know 
when to switch to the back-up fabric. 

One potential problem with such systems is that the control signal may 
become tied to one of the binary states and be unable to switch in response to 
the remote controller. For example, if a binary zero is used to maintain the line 
cards connected to the primary fabric and the control signal line becomes 
grounded, the line card will not receive a binary one signal generated by the 
controller when the binary one signal is used to command a change to the back- 
up fabric. Another potential problem is that the control signal could fail into the 
switch state and cause one or more of the components to switch in error. In 
particular, a subset of the components might see the switch indication. This is 
particularly undesirable since it could lead to a partitioning of the system and 
result in a system failure. This type failure is not amenable to the test mode 
described below. There are solutions to this problem as well, such as running 
dual redundant signals and then running tests on both of them but such 
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additional redundancy introduces more complexity. One solution to this problem 
is to periodically run a test mode in which a test signal is sent to each line card 
and a check is then made to determine if the line card responded to the test 
signal. While this approach may be suitable in simple systems having only a few 
devices that need to switch, verifying that each line card in a typical 
communication system has switched presents a complex problem. Accordingly, 
it would be desirable to provide a method for continually verifying proper 
operation of devices in response to control signals in a fault tolerant environment. 

SUMMARY OF THE INVENTION 

The present invention is directed to a method for use in a fault tolerant 
environment for assuring that devices within the environment switch between 
primary and back-up systems in response to remotely generated control signals. 
In one embodiment, the inventive system uses a binary code in the form of a pair 
of different frequency signals, i.e., a binary zero is represented by one frequency 
and a binary one is represented by another frequency. The signals may be 
continuous or may be sent in timed bursts. At the individual devices, such as the 
aforementioned line cards, a receiver is provided to detect the presence of the 
signals. Since the line cards already have receivers to detect the binary signal, 
modification to detect a frequency signal requires the addition of minimal 
components. The receiver also includes circuitry for reporting the status of the 
card and such circuitry can be used to report to the remote controller whether the 
signals are reaching the line card. Alternately, the signals could be sent in burst 
format using a single frequency in which the number of bursts could indicate a 
binary one or a binary zero. For example, if N bursts are received in some unit of 
time, that could be indicative of one binary state. If 2N burst are received in the 
same unit of time, that could be indicative of another binary state. In another 
form, the receiver could be programmed to look for N changes of frequency per 
unit of time to indicate one binary state and 2N changes of frequency could be 
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indicative of another binary state. In any of the examples, the receiver could be 
programmed to notify the remote controller whenever signals are being received 
and the absence of signal confirmation at the controller would be indicative of a 
loss of the control signal. In this way, the system would always know whether or 
not the control signal is being transmitted to the devices and thereby provide 
assurance that the redundancy is available. 

BRIEF DESCRIPTION OF THE DRAWING 

For a better understanding of the present invention reference may be had 
to the following detailed description taken in conjunction with the accompanying 
drawing in which: 

Fig. 1 is a simplified illustration of a phone switching system incorporating 
a redundant switching fabric with which the present invention may be used; and 
FIG. 2 is a graph illustrating two forms of control signals. 

DETAILED DESCRIPTION OF THE INVENTION 

Referring to Fig. 1, there is illustrated a portion of a communication 
switching system 10 with which the present invention may be used. The system 
includes a block 12 identified as a remote controller which monitors and directs 
data flow into a distribution network. Data entering block 12 at line 14 is directed 
into a data distribution block 16 which forwards the data into multiple selected 
paths, two of which are shown at 18 and 20 coupling the data into a pair of 
redundant switching fabrics 22 and 24. The switching fabrics couple data signals 
to and from a set of line cards 26. In the communication system, the line cards 
are arranged so that each card directs calls to a specific communication line. The 
switching fabric is essentially a back plane connecting the line cards to the 
communication lines. In existing systems, the remote controller monitors 
operation of the switching fabric and determines whether there is any failure in 
the fabric. In the event of a failure, the controller 12 provides a DC signal to 
instruct the line cards to switch their respective inputs and outputs to the back-up 
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fabric. Both the switching fabrics 22 and 24 are arranged to couple output data 
through a data select block 28. The block 28 functions to pass data from either 
fabric to an output bus 30. 

In prior art systems, the controller 12 uses a bi-level control signal on a 
control voltage line to indicate to the line cards 26 which of the fabrics 22 and 24 
are to be used to couple data into and out of the system. For example, a signal of 
zero volts would indicate use of one fabric and a signal of some positive or 
negative voltage would indicate use of the other of the fabrics. One problem with 
this system is that a grounded or open control voltage line corresponds to one 
state of the bi-level control signal. If the controller 12 changes the state of the 
control signal, the grounded or open control line will prevent the control signal 
from changing state at the line cards and thus prevent the redundant or back-up 
fabric from being brought into use, or alternately causing one or more of the line 
cards to switch states in error, leading to a partitioned system. 

The present invention overcomes the above described problem with the 
control line signaling by changing the format of the control signal. The bi-level 
control signal is replaced with a signal that has a varying characteristic. By way 
of example, the control signal may be a dual frequency signal such that a first 
frequency of the signal indicates selection of a primary fabric (or other device) 
and a second frequency of the signal indicates selection of a back-up fabric (or 
other device). FIG. 2 at 32 shows a first frequency at A and a second frequency 
at B. As another example, the signal could be a multipulse signal in which a first 
number of pulses per unit of time would indicate selection of a first device and a 
second number of pulses per unit of time would indicate selection of a second 
device. FIG. 2 at 34 indicates one form of such pulsing. Other variations of this 
concept could be implemented with the basic theme of a variation in the control 
signal per unit time being such as to assure that a loss of control signal can be 
recognized. All of these signals are characterized by having a varying value 
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rather than being set at some fixed value that could be duplicated by inadvertent 
coupling of the control line to some fixed value. 

In the illustrative example, the line cards 26 could be modified to receive 
the varying signal and provide a response to the controller 12 confirming receipt 
5 of the signal. In one form, the control voltage line, such as the lines 32 and 34, 
could be bi-directional signal lines passing through the fabrics 22 and 24 to the 
respective line cards 26. Each line card could be modified to return a 
recognizable signal to the controller to indicate to the controller that the control 
voltage signal was received. Various types of signal responsive circuits are 
10 known in the art for performing this function. Further, while the control signal line 
q is shown as a hard-wired line in the drawing, it will be understood that the return 

y signal could be a wireless transmission. 
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Pi While the invention has been described in what is presently considered to 
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gj be a preferred embodiment, various modifications will become apparent to those 

W 15 skilled in the art. It is intended therefore that the invention not be limited to the 

l, t specific disclosed embodiment but be interpreted within the full spirit and scope 

JJ{ of the appended claims. 
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